Beveiligingsadvies

CVE-2026-42167

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 00:00:00

Laatst bijgewerkt 2026-05-01 18:22:51

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).

← Alle CVE's bekijken Bekijk op cve.org ↗